A vulnerability in the Vector Packet Processor (VPP) of Cisco Packet Data Network Gateway (PGW) could allow an unauthenticated, remote attacker to stop ICMP traffic from being processed over an IPsec connection. This vulnerability is due to the VPP improperly handling a malformed packet. An attacker could exploit this vulnerability by sending a malformed Encapsulating Security Payload (ESP) packet over an IPsec connection. A successful exploit could allow the attacker to stop ICMP traffic over an IPsec connection and cause a denial of service (DoS).
References
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:40
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.8 |
| References | () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pdng-dos-KmzwEy2Q - Vendor Advisory |
11 Apr 2023, 20:55
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Cisco asr 5500
Cisco asr 5700 Cisco Cisco packet Data Network Gateway Cisco asr 5000 |
|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:h:cisco:asr_5700:-:*:*:*:*:*:*:* cpe:2.3:a:cisco:packet_data_network_gateway:*:*:*:*:*:*:*:* cpe:2.3:h:cisco:asr_5000:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:asr_5500:-:*:*:*:*:*:*:* |
|
| References | (CISCO) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-pdng-dos-KmzwEy2Q - Vendor Advisory |
05 Apr 2023, 17:35
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-05 17:15
Updated : 2024-11-21 07:40
NVD link : CVE-2023-20051
Mitre link : CVE-2023-20051
CVE.ORG link : CVE-2023-20051
JSON object : View
Products Affected
cisco
- asr_5500
- packet_data_network_gateway
- asr_5700
- asr_5000
CWE